Privacy Policy

1. Who we are

Darky (“we”, “us”) provides a Discord bot and web dashboard for server moderation, analytics, and automation. This policy explains what data we collect through the bot and dashboard (together, the “Service”), why we collect it, and how you can control it. Darky is operated by an individual based in the Netherlands, not a registered company. For privacy questions or to exercise the rights described below, contact privacy@darky.me.

2. Data we collect, and why

• Discord account data (user ID, username, avatar, and the servers you share with the bot): obtained via Discord OAuth2 when you sign in. Purpose: to identify you, enforce per-server permissions, and let you manage servers you administer. Legal basis: performance of a contract (providing the Service you requested).
• Server configuration you set up (moderation settings, automation rules, role/channel configuration): entered by you or your server's staff. Purpose: to run the features you configured. Legal basis: performance of a contract.
• Moderation and activity records (case history, warnings, audit logs) generated by using moderation and automation features, scoped to servers where Darky is installed. Purpose: to give server staff an accountable history of moderation actions. Legal basis: performance of a contract and our legitimate interest in abuse prevention.
• Usage and diagnostic data (request logs, error diagnostics): kept for up to 30 days. Purpose: to keep the Service reliable, debug incidents, and detect abuse. Legal basis: legitimate interest in operating a secure, working Service.
• Billing data (if you subscribe to a paid plan): handled by our payment processor, Lemon Squeezy, who acts as merchant of record — we do not store full card details ourselves. Purpose: to process payment for paid plans. Legal basis: performance of a contract.

3. Legal bases summary

Where GDPR or a similar law applies, we rely on one of these bases for each processing activity above: performance of a contract (providing the Service you asked for), legitimate interests (security, abuse prevention, and keeping the Service working), and consent for any optional feature that explicitly asks for it. We do not rely on legitimate interest where it would override your own rights and freedoms.

4. Data sharing and subprocessors

We do not sell your personal data. We share data only with the following categories of recipients, and only as needed to run the Service:

• Discord — as the platform the Service operates on; any data you send through Discord is also subject to Discord's own Privacy Policy.
• Lemon Squeezy — payment processing and billing, for servers on a paid plan.
• Our hosting and infrastructure provider — to run the bot, dashboard, database, and email delivery. Servers are located in Germany.
• Legal or safety disclosures — when required by law, or to protect the rights, safety, and security of Darky, our users, or the public.

5. Data retention

Server configuration and moderation records are retained for as long as your server keeps Darky installed, plus 30 days after removal, to allow recovery from accidental removal. Diagnostic and request logs are retained for up to 30 days. Billing records are retained for up to 30 days after a subscription is cancelled, then only as required for tax, accounting, and fraud-prevention obligations. You can request earlier deletion of your data — see Section 8.

Some records are removed automatically after a fixed period:

• Sign-in history: 30 days.
• Expired sign-in sessions: 30 days after they expire.
• Discord and bot event logs: 90 days.
• Raw analytics events: 180 days (daily totals are kept so server charts still work).
• Dashboard quick-action history and device checks used for abuse prevention: 180 days.

6. Hosting region and international transfers

Our servers are located in Germany. Where your data is processed outside your own country, we rely on appropriate safeguards (such as standard contractual clauses or an adequacy decision) for that transfer.

7. Data security

We use industry-standard safeguards (encryption in transit, access controls, rate limiting) to protect your data. No online service can guarantee absolute security, but we take reasonable steps to protect information in our care.

8. Your rights

Depending on your location, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (see our Data Deletion page for the process).
• Restrict or object to certain processing.
• Export your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

You can download a copy of your personal data or delete your account yourself under Account → Your data (you'll be asked to sign in again first). For anything else, use the process on our Data Deletion page, or contact us as described in Section 11. You can also remove Darky from your server at any time from Discord's server settings.

9. Complaint rights

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection supervisory authority — for EU/EEA residents, this is typically the authority in your country of residence, place of work, or where the alleged issue occurred.

10. Children's privacy

The Service is not directed to children under 13 (or the minimum age required by Discord and applicable law in your jurisdiction). We do not knowingly collect data from children below that age.

11. Contact us and changes to this policy

Questions about this policy, or to exercise your rights, should go to privacy@darky.me or reach us on Discord. We may update this policy from time to time; material changes will be announced on this page and via our Discord server.